Transformed OTP Authentication Against Compromised MFA

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing security measures for computing devices lack a dynamic approach to protect against unauthorized access, particularly in the face of evolving threats and potential compromises in multifactor authentication methods.

Innovation Solution

Implementing a system that allows users to choose a transform for one-time passwords (OTPs), applying the transform to the OTP before entry, and comparing the transformed OTP to a reference OTP for verification, thereby enhancing security through user-specific knowledge.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional OTP verification is used, then the authentication process is simple and fast, but the security level is insufficient against compromised multifactor authentication methods

Engineering Contradiction:

Improvesecurity levelVSAvoidauthentication process complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

Instead of verifying the OTP directly, the system inverts the verification process by applying a reverse transform to the entered OTP and comparing it against a transformed reference OTP. This inversion maintains the same computational complexity while significantly enhancing security against compromised authentication methods

Inventive Principle:

Principle #13The other way round (Inversion)

Solution Approach 2:

The system changes the parameter of OTP verification by introducing transform functions (reverse, rotate, substitute) that modify the OTP before comparison. This parameter change transforms the verification process from direct matching to transformed matching, thereby improving security without substantially increasing complexity

Inventive Principle:

Principle #35Parameter changes

2Reliability

If user-specific transforms are implemented, then security is enhanced against unauthorized access, but the authentication process requires additional computational steps

Engineering Contradiction:

Improveprotection against unauthorized accessVSAvoidauthentication time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The system applies partial transformation by selecting from a limited set of transform functions (reverse, rotate, substitute) rather than implementing all possible transformations. This partial action provides sufficient security enhancement while minimizing the time penalty associated with complex computational operations

Inventive Principle:

Principle #16Partial or excessive action

3Reliability

If account lockout mechanisms are added, then security against brute force attacks is improved, but the user experience may be degraded due to potential lockouts

Engineering Contradiction:

Improvesecurity against brute force attacksVSAvoiduser accessibility

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system implements account lockout as a preventive measure before brute force attacks can succeed. By cushioning against potential attacks in advance through lockout mechanisms, the system protects security while the transformed OTP verification makes brute force attacks computationally infeasible, thereby reducing the likelihood of legitimate user lockouts

Inventive Principle:

Principle #11Beforehand cushioning (Prior cushioning)

Data Source

PatentUS12615251B2Transformed one time password (OTP) for authentication

Publication Date: 2026.04.28 DELL PROD LP

AI summary

A password-protected device may support transformed passwords. In one example, a one-time password (OTP) may have a time-limited validity. The transform may be known to a user, and the transform may include manipulating characters in the OTP, such as by transposing characters, incrementing characters, or the like. The user may enter a transformed password to the system, and the system may reverse the transform and then compare the OTP to a reference OTP. The transform may provide an extra level of security over and above that provided by passwords themselves.